CVE-2021-32476CWE-770
A denial-of-service risk was identified in the draft files area, due to it not respecting user file upload limits
published March 11, 2022
What it is
A denial-of-service risk was identified in the draft files area, due to it not respecting user file upload limits. Moodle versions 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.01089 · 65.1th percentile
- Weakness
- CWE-770 · Allocation of Resources Without Limits or Throttling
- Published
- 2022-03-11T00:00Z
EPSS history
Timeline